General
- Target Docs.exe
- Size 1.2MB
- Sample251107-d4xt8azmel
- SHA256 9adeec7138d5d6854c3632ed0560edf5566d75347ffb0b13aa441ba89aed930a
- MD5 395ac356edd0f2ad2e2243f20ba68f3b
- SHA1 6659c39f4ac6d345c4bf110085bf8ec02fb32dd6
- SHA512 1c90e0e821a3f1734470fac1dc82c88e85e579af379197af571617f41151286997808919dcf9335686d0d460de322371a8eba41522875766ebd9a5dd8de3468b
- SSDEEP 24576:ftb20pkaCqT5TBWgNQ7aIsACqwRqudB1bgSpYZXt6A:cVg5tQ7aIgXU4TgcYv5
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Docs.exe
Resource
win10v2004-20251016-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Docs.exe
- Size 1.2MB
- SHA256 9adeec7138d5d6854c3632ed0560edf5566d75347ffb0b13aa441ba89aed930a
- MD5 395ac356edd0f2ad2e2243f20ba68f3b
- SHA1 6659c39f4ac6d345c4bf110085bf8ec02fb32dd6
- SHA512 1c90e0e821a3f1734470fac1dc82c88e85e579af379197af571617f41151286997808919dcf9335686d0d460de322371a8eba41522875766ebd9a5dd8de3468b
- SSDEEP 24576:ftb20pkaCqT5TBWgNQ7aIsACqwRqudB1bgSpYZXt6A:cVg5tQ7aIgXU4TgcYv5
- MD5 SHA1 SHA512 SSDEEP
-
Formbook family
-
Formbook payload
-
Suspicious use of SetThreadContext